Hacker Steals $15 Million GUA Airdrop

The SUPERFORTUNE project has reported a serious security breach resulting in the theft of approximately 14.98 million GUA tokens, valued at around $15 million at the time of the incident.

On May 27, 2026, we experienced a security incident involving the $GUA token due to a suspected address manipulation attack, leading to significant volatility in the token's value.

Initial investigations suggest that a multisig transaction was exploited through address manipulation.

— SUPERFORTUNE AI (@SUPERFORTUNE888) May 28, 2026

The breach occurred when developers aimed to send tokens to a contract for an airdrop but inadvertently redirected the funds to a hacker's wallet. This wallet's address closely resembled that of the intended recipient, differing only in the first and last four characters.

Following the theft, analysts from EmberCN noted that the stolen tokens were quickly sold off, triggering a dramatic drop of over 75% in GUA's market price.

— 余烬 (@EmberCN) May 28, 2026

The hacker reportedly converted the stolen tokens into 2,784 ETH, which is roughly $5.66 million, and distributed these funds across three separate addresses. Initially, it was believed that the project suffered from an "address poisoning" attack; however, further investigation indicated otherwise.

“The hacker's wallet had no prior interactions with our infrastructure, and we have stringent verification processes in place for multisig transactions,” stated the project team.

In response to the incident, the SUPERFORTUNE team has engaged law enforcement and cybersecurity experts to investigate the breach and trace the stolen assets. This incident follows a recent security compromise at Polymarket, which resulted in a loss of about $700,000 due to a similar issue.